-
munin (2.0.2-1ubuntu2.3) quantal-security; urgency=low
* SECURITY UPDATE: multiple denial of service issues
- debian/patches/CVE-2013-6xxx.patch: apply fixes from upstream to
master/lib/Munin/Master/{HTMLConfig,Node}.pm.
- CVE-2013-6048
- CVE-2013-6359
-- Marc Deslauriers <email address hidden> Wed, 18 Dec 2013 09:28:58 -0500
-
munin (2.0.2-1ubuntu2.2) quantal-security; urgency=low
* SECURITY UPDATE: privilege escalation via root running plugins
- debian/patches/CVE-2012-3512.patch: run each plugin in their own
state directory in Makefile, Makefile.config,
node/lib/Munin/Node/{OS,Service}.pm, plugins/lib/Munin/Plugin.pm,
plugins/node.d/*.in,plugins/node.d.linux/*.in.
- CVE-2012-3512
* SECURITY UPDATE: remote code exection via bad arguments
- debian/patches/CVE-2012-3513.patch: use MUNIN_CONFIG env variable
instead of @ARGV to specify alternate config file in
master/_bin/munin-cgi-graph.in, master/_bin/munin-cgi-html.in.
- debian/patches/CVE-2012-3512-regression.patch: Don't rely on
MUNIN_PLUGSTATE being in the environment as these scripts also get
run by a cron job in plugins/node.d.linux/apt_all.in,
plugins/node.d.linux/apt.in.
- CVE-2012-3513
* debian/rules: actually apply quilt patches.
* debian/Makefile.config: added new plugin state directory location.
* debian/munin-node.{postinst,postrm}: Switch to new plugin state
directory.
-- Marc Deslauriers <email address hidden> Wed, 17 Oct 2012 08:16:34 -0400
-
munin (2.0.2-1ubuntu2) quantal; urgency=low
* debian/patches/fix_ran_out_of_children.patch:
- Fix occasional "Ran out of children: No child processes" error messages
(LP: #1009357).
-- Petri Lehtinen <email address hidden> Wed, 03 Oct 2012 15:33:15 -0400
-
munin (2.0.2-1ubuntu1) quantal; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/munin-node.upstart,munin.upstart: Add upstart configurations.
munin (2.0.2-1) unstable; urgency=low
[ Holger Levsen ]
* New upstream version, reintroducing munin-graph (Closes: #681674) and
some bugfixes. The new munin book is added to the sources, but not yet
build.
* Add proper LSB headers to all init scripts. (Closes: #680223)
[ Stig Sandbeck Mathisen ]
* debian/control: Rename "munin-async-*" to munin-async and munin-asyncd.
-- Logan Rosen <email address hidden> Sun, 22 Jul 2012 14:19:53 -0400
-
munin (2.0.1-1ubuntu1) quantal; urgency=low
* Merge from Debian unstable. Remaining changes:
- d/munin-node.upstart,munin.upstart: Add upstart configurations.
munin (2.0.1-1) unstable; urgency=low
* New upstream version.
* Update URL to upstream webpage in debian/copyright. (Closes: #676366)
* Make munin-node depend on munin-plugins-core unconditionally and recommend
munin-plugins-extra. (Closes: #677189)
* debian/munin-node.postinst: chmod 775 /var/lib/munin/plugin-state
(Closes: #675593)
-- James Page <email address hidden> Mon, 02 Jul 2012 14:15:42 +0100
-
munin (2.0.0-1ubuntu1) quantal; urgency=low
* Resync with Debian unstable.
* d/munin-node.upstart,munin.upstart: Add upstart configurations.
munin (2.0.0-1) unstable; urgency=medium
* New upstream version. Roughly eight years after munin 1.0 there is now
finally munin 2.0! See /usr/share/doc/munin/Announce-2.0 in the munin
package for the full announcement. And/or previous debian/changelog
entries too. Enjoy! And please report bugs, 2.0.1 shall be out soon.
(Closes: #675153, #674148)
* /etc/init/munin-node: chmod 755 /var/log/munin (Closes: #674747)
* Make munin-node suggest munin-plugins-java and not munin-java-plugins.
* Lower build-depends on debhelper to version 8. (Closes: #675209)
munin (2.0~rc6-3) unstable; urgency=low
* Make munin-node depend on munin-plugins-core | munin-plugins.
(Closes: #673124)
* munin-node.logroate: create munin-node.log owned by root.
(Closes: #606216)
munin (2.0~rc6-2) unstable; urgency=low
* munin.postinst: Fix typo breaking the chgrp of $cgitempdir.
munin (2.0~rc6-1) unstable; urgency=low
[ Holger Levsen ]
* New upstream release candidate, quoting the upstream Changelog:
- Many bugfixes in munin-cgi-graph:
- if url parameters are not valid, send HTTP 404 instead of 500
- move the generation of png via cgi under /var/lib/munin/cgi-tmp/
(Closes: #668536)
- don't cache URL with parameters anymore, and don't keep uncached URLs
(Closes: #668667)
- validate url characters (Closes: #668666)
- add a max setting for cgi image size. (Closes: #670811)
- Plugin fixes:
- add explicit license for all plugins. (Closes: #670428)
- hddtemp_smartctl: just use the device name as the labels
- qmailscan: remove the use of tempfiles. (Closes: #668778)
* munin.NEWS: document that "cgitmpdir /var/lib/munin/cgi-tmp" has to be
set in munin.conf.
* munin-node.postinst: chmod 755 /var/log/munin (Closes: #669230)
* munin.postinst: make /var/lib/munin/cgi-tmp writable for group www-data.
[ Matthias Schmitz ]
* Add installation of apache configuration to /etc/apache2/conf-availble as
needed by Apache 2.4. (Closes: #669816)
munin (2.0~rc5-3) unstable; urgency=low
* Create /var/lib/munin/plugin-state in munin-node.postinst if it doesnt
exist. (Closes: #668975)
munin (2.0~rc5-2) unstable; urgency=low
[ Stig Sandbeck Mathisen ]
* Handle removal of old statoverrides in a more robust fashion.
(Closes: #668859)
munin (2.0~rc5-1) unstable; urgency=low
[ Holger Levsen ]
* New upstream release candidate, quoting the upstream Changelog:
- Adding the current action to the command line. Useful for debugging.
- Adding a new URL param full_size_mode to enable predictible IMG sizes
- Enable sparklines with the url param "only_graph"
- Start RRD just before first update. To avoid a very costly 1st update.
- Emit the hosts in a sorted order, instead of somewhat random.
- Do not emit png list if file handle is not defined. (Closes: #666759)
- Add old option of --force-root, but with a new name. more explicit
(Closes: #601371)
- We dont generate the png list when using cgi html.
- Remove warning when asking "list" w/o a hostname (LP: #907952)
- Many bug fixes (trac: Closes #967, #1210) (Closes: #583189, #568511,
Closes: #475078)
* Create /var/log/munin in /etc/init.d/munin-node (Closes: #626570)
* Cleanup the dpkg-statoverrides mess, by removing all existing
statoverrides in munin's and munin-nodes' postinst and just running chown and
chmod on those files and directories. Also remove statoverride handling
from postrm scripts. (Closes: #666907)
As far as I understand, the usage of dpkg-statoverride was plainly wrong
for all these years. If I'm wrong here, I'd be glad to be corrected.
[ Steve Schnepp ]
* plugin.conf: run fail2ban plugin as root. (Closes: #610825)
* move jmx_ to munin-plugins-java (Closes: #667493)
munin (2.0~rc4-1) unstable; urgency=low
* quoting upstream ChangeLog:
- Fix issue that CGI HTML doesn't refresh itself
- Fixed plugins to use the default draw style
- Various plugins fixes (Closes: #663965, #595697, #648891)
* also from upstream: munin-node: Removed the 5s per-line timeout.
(Closes: #663970)
munin (2.0~rc2-1) unstable; urgency=low
* This is not yet munin 2.0, but almost! Install at your own risk and have
fun! Also, please give feedback to <email address hidden> or
if you prefer IRC, go to #munin on OFTC.
* Quoting from /usr/share/doc/munin/Announce-2.0:
* Introducing Munin 2.0! The most important features:
* Even better scalability through:
- Large performance improvements on almost all munin's components:
- Full CGI integration. It is for graphing as well for html, if needed.
It is also completely compatible with FastCGI, that only compiles once
per run.
- Binary state data files. This has enabled a really fast startup and
storing of state files. Quite useful in munin limits that does need to
access to the rrd files.
- Complete integration with rrdcached. Starting with RRD 1.4, there is
an update daemon. It enables batched updates, and therefore reduce the
IO down. Even with 1000+ files to update every 5 min.
- Spoolfetch uses _node_read_fast() now : 3MiB is now read in 2 s instead
of 7 min.
* Complete IPv6 integration: (Closes: #592214, Closes: #558800, Closes:
#567551)
- The master only require a new perl module (IO::Socket::INET6)
- The node needs a IPv6-patched Net::Server
* Native SSH transport - No need to have a hairy setup anymore.
* Graph Zooming: The UI is still raw, but right to the point.
* New look on HTML pages, new graph colours with better contrast
* IRC ( #munin @ OFTC ) has become a real support channel, mostly aimed at
trunk.
* Full details in http://munin-monitoring.org/browser/tags/2.0-rc2/ChangeLog
or in /usr/share/doc/munin/changelog.gz on this system. (Closes: #610528,
Closes: #644960, Closes: #576009, Closes: #474193, #660224, #609900,
Closes: #582786, #591455)
* This release has been prepared through six uploads to experimental and
several users running it on their installations.
[ Steve Schnepp ]
* Maintained a branch since munin 1.5 all the way up to 1.999 to prepare
munin 2.0 packages for Debian.
* Using a 1.999.SVN naming scheme to enable rpm package building using alien
- munin-graph is no more, only CGI is left.
* Added support for async polling in munin-master, add new package
munin-async.
* Enable vectorized multiple-time updates. Speeds updates up when using
async polling. An 1s polling rate is now possible w/o much overhead, since
munin-update only runs every 5 min.
- ability to keep more data (for zooming resolution mainly)
- ability to run (some) plugins more and/or less often than every
5 minutes
- support of async polling, so munin-update can run less often than
the usual 5 min. Useful if you have too much nodes and it takes
more than 5 min to gather all the data.
- Closes: #464880
* Add new binary package: munin-plugins, containing the plugins previously
included in the munin-node package. This enables us to:
- have alternate munin-node packages in future.
- be able to build a make-dh-perl like package building system
for 3rd party plugins.
* Move POD files to package munin-doc.
- fixed duplicates (Closes: #661265)
* Move Munin::Plugins and plugins.sh into munin-common to be able to
install munin-plugins-extra without munin-plugins-core.
* debian/control changes:
- munin-async isn't recommended anymore as it will needlessly launch a
daemon since its usage isn't automatic yet.
- munin-async does actually depends on munin-common.
- A more recent version of munin-common is always ok, as it is compatible.
It enables decoupling munin, munin-node & munin-plugin-* versions.
[ Holger Levsen ]
* Merge changes from 1.4.4-1 until 1.4.7-1 into this branch and merge
debian/changelog in preparation for uploading to experimental.
* Move packaging to
svn://munin.projects.linpro.no/munin/branches/debian/wheezy
* Include large parts of upstreams Announce-2.0 in debian/changelog.
* Update to munin 2.0beta6, which has a rewrite of the timeout handling
code. The default node timeout is now 1 min. Also various bugfixes were
made.
* Update maintainer address to <email address hidden>.
* chmod 755 debian/ostype_helper in debian/rules. (Closes: #651449)
Thanks Christoph Biedl.
* Improve description of munin.init.
* debian/control:
- Rename munin-plugins to munin-plugins-core and make it
provide/break/replace munin-plugins (<<1.999.4548-3~).
- munin-java-plugins and munin-common should neither suggest munin nor
munin-node.
- rename munin-java-plugins to munin-plugins-java and make it replace and
break munin-java-plugins (<<1.999.4548-3~).
- Vcs-svn: provide path to Debian branch to avoid checking out the whole
repo when using debcheckout.
- Add quilt to build-depends.
* debian/rules: support changes in debian/control.
* munin.postrm: remove /var/log/munin/munin-cgi-html.log* on purge.
* Add munin-async.postrm to delete the munin-async user on purge.
* munin-async.postinst: set homedirectory to /var/lib/munin-async.
* Move munin-doc to section doc.
* Drop debian/patches/101-dash-bash-fw_conntrack.patch as this was fixed
upstream properly to also fix network lag problems on big firewalls with
the plugins fw_conntrack and fw_forwarded_local. (Closes: #565565)
* Provide lintian-overrides for munin and munin-doc as the manpages for
their binaries have been moved to the munin-doc package.
[ Marc Haber ]
* Clean up build leftovers in debian/rules clean clean to allow
building twice in a row.
[ Kenyon Ralph ]
* Drop df_gnu patch which was integrated into the upstream plugin.
[ Stig Sandbeck Mathisen ]
* Convert debian/rules to modern debhelper version (compat level 9)
* Suggest ruby for plugins in that language
* Bump standards version (no changes)
munin (1.4.7-1) unstable; urgency=low
* New upstream release
munin (1.4.6-3) unstable; urgency=low
* Update maintainer address to <email address hidden>.
* Add Steve Schnepp to uploaders.
* Remove Tore Anderson, Dagfinn Ilmari Mannsaker, Loic Dachary and Matthias
Schmitz from uploaders. Thanks for all your work!
* munin/postrm: only delete /etc/apache2/conf.d/munin on purge.
(Closes: #653596) - Sadly the fix will only be effective the next time
munin is upgraded...
munin (1.4.6-2) unstable; urgency=high
* Add logrotate rule for /var/log/munin/munin-cgi-graph.log. Thanks to
Jerome Warnier for the patch. (Closes: #647302)
* Register an interest in the perl-major-upgrade trigger, and
recompile rules and restart munin-node when perl is upgraded to a new
major version. Thanks to Dominic Hargreaves for this nice new feature.
(Closes: #626346)
munin (1.4.6-1) unstable; urgency=low
* New upstream release (Closes: #639745), closing several bugs
in munin:
- "munin-limits hangs when more than one contact is used"
(Closes: #553528)
- cgi/fastcgi: Use GMT time zone in Last-Modified header
(Closes: #601200)
- include patch to fix empty list of plugins (Closes: #609241)
and in munin-node:
- bind9_rndc plugin: version number gate fails (Closes: #573750)
- bind9 plugin: doesn't work at all (Closes: #612108)
- cidr_allow does not assume implicit /32 (Closes: #592842)
↝- make slapd_ autoconf work, support anonymous bind, and env.server
variable (Closes: #596026)
- exim munin does weird things (Closes: #601505)
- Use selective tls per node in munin master (Closes: #615226)
- IPv6 functionality (Closes: #567551) in ip_ plugin assumes /bin/sh
being bash (Closes: #613029)
Also drop debian/patches/102-snort-bashism.patch as this is included
upstream now.
* munin.postinst: only create link from /etc/munin/apache.conf to
/etc/apache2/conf.d/munin on new installations, not on upgrades.
(Closes: #619399)
* Bump standards-version to 3.9.1, no changes necessary.
* Split uploaders field in debian/control in multiple lines.
* Add build-arch and build-indep targets to debian/rules.
-- James Page <email address hidden> Mon, 11 Jun 2012 12:54:28 +0100
-
munin (1.4.6-3ubuntu5) quantal; urgency=low
[ Vibhav Pant ]
* debian/patches/upstream_changeset_4597.patch:
- Fixes incorrect graph configuration in munin plugin
exim_mailqueue (LP: #598385).
[ James Page ]
* debian/patches/upstream_changeset_4358.patch:
- Silent Perl 5.14 warnings to re-enable collection of
memory usage data in the memory plugin (LP: #1000678).
-- Vibhav Pant <email address hidden> Mon, 21 May 2012 14:39:19 +0100
-
munin (1.4.6-3ubuntu4) quantal; urgency=low
* No-change rebuild with openjdk-7 as default-jdk.
-- James Page <email address hidden> Fri, 18 May 2012 11:46:15 +0100
-
munin (1.4.6-3ubuntu3) precise; urgency=low
* d/patches/fix_iostat_plugin.patch: Cherry picked patch from upstream
trunk to correct output of iostat plugin (LP: #919429).
-- James Page <email address hidden> Tue, 03 Apr 2012 11:31:24 +0100
